Static task
static1
Behavioral task
behavioral1
Sample
CardS.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
anticipations/hexagons.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
anticipations/marriagesPoundage.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
anticipations/oedipusSickles.js
Resource
win10v2004-20220812-en
General
-
Target
Card#8266.iso
-
Size
756KB
-
MD5
33bb0797becefb6a3cb7df8eb4adca4c
-
SHA1
3f4dbd05d8ca4888a3bc94e7815eb62d0f68bbed
-
SHA256
5a072dda2c8ffef45861c53b7bd2b89f902960c422d24cf4eb77b189ea883238
-
SHA512
a2f414bbd5d5e2933a6fc268f427cb3755a87e7807e475e6601750e939b5caedb825bc720db52338a862a452c795693c3c4b4365607d29d83a57bbdbd6020a8f
-
SSDEEP
12288:SieL1vc1PdFjpmw5qS6xnGWvE/NIg5UT+QD1lNMAxH:p81IFnqnvE/5w9MW
Malware Config
Signatures
Files
-
Card#8266.iso.iso
-
CardS.lnk.lnk
-
anticipations/hexagons.db.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
anticipations/marriagesPoundage.cmd
-
anticipations/oedipusSickles.js.js